AMENDMENTS TO THE CLAIMS 



1-33. (Canceled) 

34. (Currently Amended) A password recovery system for re-supplying a password, 
said password recovery system comprising: 

a communication terminal device for receiving a predetermined service via a network 
using the password; and 

a portable recording medium for storing the password, the portable recording medium 
being coupled to said communication terminal device, 

wherein said communication terminal device comprises: 

a controller for receiving from an external communication terminal device a 
signed data set, based on an indication for recovering the password from a user of said 
communication terminal device when the user forgets the password, the external communication 
terminal device guaranteeing legitimacy of the user of said communication terminal device and 
generating the signed data set with a secret key, and for outputting to said portable recording 
medium the received signed data set when said portable recording medium is coupled to said 
communication terminal device, and 

wherein said portable recording medium comprises: 

a memory for storing a public key corresponding to the secret key; and 
a controller for inputting from said communication terminal device the signed 
data set, and forjudging, using the public key and the signed data set, whether the signed data set 
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is signed by the external communication terminal device, said judging being performed solely by 
said controller of said portable recording medium, 

wherein said controller of said portable recording medium recovers the same 
password as the password stored in said memory of said portable recording medium when it is 
judged that the signed data set is signed by the external communication terminal device, and 
outputs the recovered password to said communication terminal device, and 

wherein said controller of said portable recording medium does not recover the 
same password as the password stored in said memory of said portable recording medium when 
it is judged that the signed data set is not signed by the external communication terminal device. 

35. (Previously Presented) The password recovery system according to claim 34, 
wherein said memory of said portable recording medium stores an expiration period for 

receiving the signed data set, 

wherein the signed data set includes date/time information, the date/time information 

indicating a date and time at which the signed data set is generated at the external communication 

terminal device, and 

wherein said controller of the portable recording medium judges using the public key and 
the signed data set whether the signed data set is signed by the external communication terminal 
device and whether the date/time information is within the expiration period stored in said 
memory, recovers the same password as the password stored in said memory of said portable 
recording medium when it is judged that the signed data set is signed by the external 
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communication terminal device and that the date/time information is within the expiration period 
stored in said memory, and outputs the recovered password to said communication terminal 
device. 

36. (Previously Presented) The password recovery system according to claim 34, 
wherein said memory of said portable recording medium stores a predetermined number 

indicating a number of the signed data set that is required to recover the password, and 

wherein said controller of said portable recording medium counts a number of the signed 
data set when it is judged that the signed data set is signed by the external communication 
terminal device, recovers the same password as the password stored in said memory of said 
portable recording medium when the counted number of the signed data set reaches the 
predetermined number stored in said memory of said portable recording medium, and outputs the 
recovered password to said communication terminal device. 

37. (Currently Amended) A communication terminal device for re-supplying a 
password to a user of the communication terminal device and for receiving a predetermined 
service via a network using the password, wherein a portable recording medium is coupled to 
said communication terminal device, the portable recording medium storing the password, and 
said communication terminal device comprising: 

a controller for receiving from an external communication terminal device a signed data 
set, based on an indication for recovering the password from the user of said communication 
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terminal device when the user forgets the password, the external communication terminal device 
guaranteeing legitimacy of the user of said communication terminal device and generating the 
signed data set with a secret key, and for outputting to the portable recording medium the 
received signed data set when the portable recording medium is coupled to said communication 
terminal device, 

wherein the portable recording medium comprises: 

a memory for storing the password and a public key corresponding to the secret 

key; and 

a controller for inputting from said communication terminal device the signed 
data set, and forjudging, using the public key and the signed data set, whether the signed data set 
is signed by the external communication terminal device, said iudainK bcina performed solely by 
said controller of said portable recording medium, 

wherein the controller of the portable recording medium recovers the same 
password as the password stored in the memory of the portable recording medium when it is 
judged that the signed data set is signed by the external communication terminal device, and 
outputs the recovered password to said communication terminal device, and 

wherein the controller of the portable recording medium does not recover the 
same password as the password stored in the memory of the portable recording medium when it 
is judged that the signed data set is not signed by the external communication terminal device. 

38. (Previously Presented) The communication terminal device according to claim 
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37, wherein the memory of the portable recording medium stores an expiration period for 
receiving the signed data set, 

wherein the signed data set includes date/time information, the date/time information 
indicating a date and time at which the signed data set is generated at the external communication 
terminal device, and 

wherein the controller of the portable recording medium judges using the public key and 
the signed data set whether the signed data set is signed by the external communication terminal 
device and whether the date/time information is within the expiration period stored in the 
memory, recovers the same password as the password stored in the memory of the portable 
recording medium when it is judged that the signed data set is signed by the external 
communication terminal device and that the date/time information is within the expiration period 
stored in the memory, and outputs the recovered password to said communication terminal 
device. 

39. (Previously Presented) The communication terminal device according to claim 

37, 

wherein the memory of the portable recording medium stores a predetermined number 
indicating a number of the signed data set that is required to recover the password, and 

wherein the controller of the portable recording medium counts a number of the signed 
data set when it is judged that the signed data set is signed by the external communication 
terminal device, recovers the same password as the password stored in the memory of the 
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portable recording medium when the counted number of the signed data set reaches the 
predetermined number stored in the memory of the portable recording medium, and outputs the 
recovered password to said communication terminal device. 

40. (Previously Presented) The communication terminal device according to claim 
37, further comprising a display for displaying the recovered password output from the portable 
recording medium. 

41. (Previously Presented) The communication terminal device according to claim 
37, further comprising a memory for storing a piece of application software corresponding to the 
recovered password output from the portable recording medium, wherein said controller of said 
communication terminal device performs the piece of the application software using the 
recovered password. 

42. (Currently Amended) A portable recording medium for being coupled to a 
communication terminal device for receiving a predetermined service via a network using a 
password and for re-supplying the password to a user of the communication terminal device, the 
communication terminal device receiving from an external communication terminal device a 
signed data set, based on an indication for recovering the password from the user of the 
communication terminal device when the user forgets the password, the external communication 
terminal device guaranteeing legitimacy of the user of the communication terminal device and 
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generating the signed data set with a secret key, and for outputting to said portable recording 
medium the received signed data set when said portable recording medium is coupled to the 
communication terminal device, said portable recording medium comprising: 

a memory for storing the password and a public key corresponding to the secret key; and 

a controller for inputting from the communication terminal device the signed data set, and 
forjudging, using the public key and the signed data set, whether the signed data set is signed by 
the external communication terminal device, said judging being performed solely by said 
controller of said portable recording medium, 

wherein said controller recovers the same password as the password stored in said 
memory of said portable recording medium when it is judged that the signed data set is signed by 
the external communication terminal device, and outputs the recovered password to the 
communication terminal device, and 

wherein said controller does not recover the same password as the password stored in said 
memory of said portable recording medium when it is judged that the signed data set is not 
signed by the external communication terminal device. 

43. (Previously Presented) The portable recording medium according to claim 42, 
wherein said memory stores an expiration period for receiving the signed data set, 
wherein the signed data set includes date/time information, the date/time information 

indicating a date and time at which the signed data set is generated at the external communication 

terminal device, and 
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wherein said controller judges using the public key and the signed data set whether the 
signed data set is signed by the external communication terminal device and whether the 
date/time information is within the expiration period stored in said memory, recovers the same 
password as the password stored in said memory of said portable recording medium when it is 
judged that the signed data set is signed by the external communication terminal device and that 
the date/time information is within the expiration period stored in said memory, and outputs the 
recovered password to the communication terminal device. 

44. (Previously Presented) The portable recording medium according to claim 42, 
wherein said memory stores a predetermined number indicating a number of the signed 
data set that is required to recover the password, and 

wherein said controller counts a number of the signed data set when it is judged that the 
signed data set is signed by the external communication terminal device, recovers the same 
password as the password stored in said memory of said portable recording medium when the 
counted number of the signed data set reaches the predetermined number stored in said memory 
of said portable recording medium, and outputs the recovered password to the communication 
terminal device. 

45. (Currently Amended) A password recovery method for re-supplying a password 
using a communication terminal device and a portable recording medium coupled to the 
communication terminal device, the communication terminal device receiving a predetermined 
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service via a network using the password, and the portable recording medium storing the 
password, the method comprising: 

receiving, at the communication terminal device, from an external communication 
terminal device a signed data set, based on an indication for recovering the password from a user 
of the communication terminal device when the user forgets the password, the external 
communication terminal device guaranteeing legitimacy of the user of the communication 
terminal device and generating the signed data set with a secret key; 

outputting, at the communication terminal device, to the portable recording medium the 
received signed data set when the portable recording medium is coupled to the communication 
terminal device; 

storing, at the portable recording medium, the password and a public key corresponding 
to the secret key; 

inputting, at the portable recording medium, from the communication terminal device the 
signed data set; and 

judging, at the portable recording medium, using the public key and the signed data set, 
whether the signed data set is signed by the external communication terminal device, said 
judging being performed solely by a controller the portable recording medium, 

wherein, when it is judged by said judging that the signed data set is signed by the 
external communication terminal device, the portable recording medium recovers the same 
password as the password stored in the memory of the portable recording medium, and outputs 
the recovered password to the communication terminal device, and 
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wherein, when it is judged by said judging that the signed data set is not signed by the 
external communication terminal device, the portable recording medium does not recover the 
same password as the password stored in the memory of the portable recording medium. 



11 



